Set up Jurella

Setup in five steps

We walk every pilot firm's IT team through it.

1. Install

   Run Jurella as a container or as a Windows service, on your firm's server or in your own Azure or AWS account.

2. Activate

   Run one command on the server with your registration key and the email address you signed up with. It reads no mail until it is activated.

3. Connect Microsoft 365

   Run our PowerShell script to create your firm's own app registration and certificate, limited to the agent mailboxes.

4. Choose lawyers and sources

   On the admin page, choose the lawyers it serves and connect the document libraries and folders they use.

5. Go live

   Nothing is sent until you turn sending on. You can pause it at any time from the admin page.

Activation

When we approve your sign-up, we email you a registration key. On the server, run:

jurella activate --key <your registration key> --email <your sign-up email>

After that, the server sends us a short status report every few minutes: whether it is working, its version, job and error counts and AI usage. Never email text, names or any client information.

If your lawyers sign up with the Jurella desktop app, the report also includes your server's admin address so the app can find the server. Anyone holding one of your lawyer keys can look it up, so keep the admin page limited to your firm's network.

Two ways to run it

Download Jurella 0.2.2

For approved pilot firms. You need your registration key to activate it. Check each file against its SHA-256 checksum before installing.

What you need

• A Microsoft 365 tenant with Exchange Online, and an admin who can create app registrations and grant admin consent.
• Admin consent for two read-only directory permissions, GroupMember.Read.All and User.ReadBasic.All. Jurella uses them only to read the members and sign-in names of your lawyers group; Microsoft offers no permission limited to one group.
• A Linux VM or container platform, or a Windows server.
• A secrets store: Azure Key Vault, AWS Secrets Manager or Windows Credential Manager.
• A mailbox for each lawyer's agent, such as [email protected], and an Entra group of the lawyers it serves.
• Your registration key, which we send when your pilot is approved.
• Outbound HTTPS (port 443) from the server to: ai-associate.pages.dev (activation and status reports); login.microsoftonline.com and graph.microsoft.com (Microsoft 365); ghcr.io and pkg-containers.githubusercontent.com (container image); your AI model provider (api.anthropic.com, bedrock-runtime.<region>.amazonaws.com or <resource>.services.ai.azure.com); your secrets store (<vault>.vault.azure.net, or AWS Secrets Manager and KMS in your region); www.courtlistener.com and storage.courtlistener.com (case law); www.nysenate.gov, www.nycourts.gov, govt.westlaw.com, delcode.delaware.gov and scholar.google.com (public law sources); and your iManage or NetDocuments host, if you connect one. Nothing connects in to the server.

Pilot firms get the full IT install guide and our help with setup.